gathr
Privacy Policy
Last updated: 26 April 2026
Who we are
gathr is a Shopify app operated by Matthew Bull, trading as the Big Click, a sole trader registered in the United Kingdom. References to “we”, “us”, or “our” mean the Big Click. References to “the app” mean gathr.
Questions about this policy or your data? info@gathrticket.com.
What gathr does
gathr lets Shopify merchants sell event tickets and check attendees in at the door using QR codes. When someone buys an event-ticket product from a merchant’s Shopify store, gathr generates a unique ticket, emails it to the buyer, and lets venue staff scan it on arrival.
Personal data we process
We act as a data processor on behalf of the merchant who installs gathr. The merchant is the data controller for their customers’ personal data — they decide what events to sell and to whom. We process that data on their instructions.
From merchants (the Shopify store owner)
- Shopify shop domain (e.g.
your-store.myshopify.com) - An offline access token issued by Shopify, used to read orders and report ticket sales for billing
- The shop owner’s email address (provided by Shopify)
From ticket buyers (the merchant’s customers)
- Name and email address (provided by Shopify when an order is placed)
- Shopify order ID
- The ticket QR code we generate
We do not receive payment card details, billing addresses, or any product data unrelated to event tickets.
From venue staff (people the merchant invites to scan tickets)
- Email address and a hashed password
- A signed session cookie when they log in to the venue portal
- The time and outcome of each scan they perform
How we use this data
| Purpose | Data used | Legal basis (UK GDPR) |
|---|---|---|
| Generating and emailing tickets to buyers | Buyer name, email, order ID | Performance of the merchant’s contract with the buyer |
| Letting venue staff scan tickets | Staff email, scan timestamps | Legitimate interest of the merchant |
| Reporting ticket sales to Shopify for billing | Aggregate ticket counts | Performance of our contract with the merchant |
| Operational emails to merchants (e.g. setup help) | Shop owner email | Performance of contract |
We do not send marketing emails. We do not sell or share data with advertisers.
Sub-processors
We rely on the following third parties to operate the service:
| Sub-processor | Purpose | Data location |
|---|---|---|
| Shopify (Shopify Inc.) | Source of order data; billing | EU / US |
| Fly.io (Fly.io Inc.) | Application hosting and Postgres database | London, UK (lhr region) |
| Resend (Resend Inc.) | Transactional email delivery | US (data in transit) |
Each sub-processor operates under its own privacy policy and contractual safeguards (Standard Contractual Clauses where applicable).
Cookies
The gathr app sets one cookie: a signed session cookie used to keep venue staff logged into the venue portal. It is HttpOnly, Secure, and SameSite=Lax. We do not use analytics, advertising, or tracking cookies.
Data retention
- Ticket and order data is retained for as long as the merchant has gathr installed.
- On uninstall, Shopify sends a
shop/redactrequest 48 hours later; we delete all of the shop’s data within 30 days of that request. - On a customer redaction request (
customers/redactfrom Shopify), we delete that customer’s tickets, name, and email within 30 days. - Customer data requests (
customers/data_requestfrom Shopify) are forwarded to the merchant, who is the controller; we provide them with the data we hold on that customer within 30 days.
Your rights
If you are an EU/UK resident, you have the right to access, correct, delete, or port your personal data, and to object to or restrict its processing. The most direct route is to contact the merchant whose store you bought your ticket from — they are the data controller. If the merchant does not respond, contact us at info@gathrticket.com and we will assist.
You can also lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).
Changes to this policy
We will update the “Last updated” date at the top of this page when we change anything material. Continued use of the app after a change constitutes acceptance of the revised policy.
Contact
the Big Click (Matthew Bull, sole trader)
info@gathrticket.com